This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9PLMhxGIuYEPMW_DZdsPNWw4p64.roa File: 9PLMhxGIuYEPMW_DZdsPNWw4p64.roa (raw, json) Hash identifier: Q6Uf7cbfCRViGGCjuoE16P9HbpQmhEtTIi5QQUxzRSQ= Subject key identifier: F4:F2:CC:87:11:88:B9:81:0F:31:6F:C3:65:DB:0F:35:6C:38:A7:AE Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b Certificate serial: 018F60BD68A41C246D6B2A52CC9549B5D92D Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9PLMhxGIuYEPMW_DZdsPNWw4p64.roa Signing time: Fri 10 May 2024 04:22:56 +0000 ROA not before: Fri 10 May 2024 04:22:56 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2121 IP address blocks: 193.0.24.0/21 maxlen: 21 2001:67c:64::/48 maxlen: 48 2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128 Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:60:bd:68:a4:1c:24:6d:6b:2a:52:cc:95:49:b5:d9:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b Validity Not Before: May 10 04:22:56 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=f4f2cc871188b9810f316fc365db0f356c38a7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b4:70:e4:0b:17:e5:e4:83:8c:3f:8c:11:8b: 5d:3d:71:ce:c0:73:c5:67:d2:2e:c0:ce:89:f5:95: 0e:fc:f2:b2:d2:42:c6:27:cd:cd:a1:a3:ad:48:b9: 5e:40:89:5b:a1:f8:a1:43:74:13:30:fb:a1:99:51: 02:a3:b9:8e:fb:25:14:d5:13:17:8d:76:4d:e3:9f: 94:15:79:5f:3a:69:8d:c6:16:ee:c7:0b:ea:ae:63: a3:0f:8b:f0:83:70:76:1f:ac:8c:b4:59:8a:36:ed: 01:87:a0:ba:ae:eb:a1:33:f9:74:8d:a1:f2:ed:8e: 43:33:47:82:d3:de:cd:89:0c:66:2e:6b:c0:de:6d: 24:cb:1e:61:9e:95:92:f4:9d:90:d5:51:17:fd:57: f0:14:94:e0:dc:1b:ce:03:77:f0:98:2e:83:3d:d7: cf:95:d6:12:a5:06:23:b9:54:43:d7:70:39:76:56: e5:c3:f8:62:5e:a0:a9:e3:18:26:5e:fa:32:f4:b3: 05:a6:22:e2:d1:55:f4:5c:58:52:f9:75:44:a1:94: b4:c6:2e:97:c3:ab:0a:36:74:5e:7b:1f:f0:25:7a: a0:1b:ae:62:b1:d3:cd:b2:e2:ec:93:b4:37:fd:65: e7:5d:30:be:5f:a9:3f:8c:47:2e:e2:c6:58:08:fd: a2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F2:CC:87:11:88:B9:81:0F:31:6F:C3:65:DB:0F:35:6C:38:A7:AE X509v3 Authority Key Identifier: keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/9PLMhxGIuYEPMW_DZdsPNWw4p64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.0.24.0/21 IPv6: 2001:67c:64::/48 Signature Algorithm: sha256WithRSAEncryption 68:62:c1:b9:9f:a4:92:44:58:11:0b:c5:08:ea:a4:04:2f:e8: 6c:86:da:7a:b9:78:c0:70:33:6d:0a:11:2b:41:f7:16:b2:3d: 28:68:0c:1d:8c:21:88:00:33:1d:fb:7d:b7:eb:45:35:3d:66: 09:0a:c6:9c:b3:4f:e8:ac:a7:43:c4:e4:c6:60:83:3d:84:f7: 9e:d4:d8:42:4e:d9:81:76:5c:dd:26:9b:34:e6:0f:03:33:ea: e1:8b:b5:ee:00:e5:84:72:df:51:d3:cb:05:9b:55:5b:84:d2: 52:84:13:02:35:9d:aa:f9:f4:15:77:dc:3b:a3:43:92:01:45: 7c:80:29:eb:c1:cf:3d:6d:26:30:c2:26:47:1c:7c:1f:46:7f: a8:5e:7b:51:cb:90:19:ee:32:f6:14:e1:1d:46:d9:54:e2:55: 78:c5:dc:29:c2:45:9d:a2:45:87:67:b0:20:7c:d6:ea:da:70: 72:36:15:71:af:07:3e:5b:63:46:a1:36:98:85:46:00:e4:91: 23:ea:6f:d2:12:34:2f:64:9e:0a:54:6f:c3:06:a3:17:ee:34: 74:1f:b4:41:bc:89:41:a8:07:b8:06:30:59:65:98:d6:56:2d: 60:b3:a0:35:d5:36:5a:19:a6:92:f1:6f:d9:e4:e3:a9:bb:cb: b2:f6:d0:28 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAY9gvWikHCRtaypSzJVJtdktMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh YzcwN2IwHhcNMjQwNTEwMDQyMjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGYyY2M4NzExODhiOTgxMGYzMTZmYzM2NWRiMGYzNTZjMzhhN2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbRw5AsX5eSDjD+MEYtdPXHOwHPF Z9IuwM6J9ZUO/PKy0kLGJ83NoaOtSLleQIlbofihQ3QTMPuhmVECo7mO+yUU1RMX jXZN45+UFXlfOmmNxhbuxwvqrmOjD4vwg3B2H6yMtFmKNu0Bh6C6ruuhM/l0jaHy 7Y5DM0eC097NiQxmLmvA3m0kyx5hnpWS9J2Q1VEX/VfwFJTg3BvOA3fwmC6DPdfP ldYSpQYjuVRD13A5dlblw/hiXqCp4xgmXvoy9LMFpiLi0VX0XFhS+XVEoZS0xi6X w6sKNnReex/wJXqgG65isdPNsuLsk7Q3/WXnXTC+X6k/jEcu4sZYCP2iLwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPTyzIcRiLmBDzFvw2XbDzVsOKeuMB8GA1UdIwQY MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt ZDEyZjAzOWRiMmM5LzEvOVBMTWh4R0l1WUVQTVdfRFpkc1BOV3c0cDY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5 LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGhiwbmfpJJEWBELxQjq pAQv6GyG2nq5eMBwM20KEStB9xayPShoDB2MIYgAMx37fbfrRTU9ZgkKxpyzT+is p0PE5MZggz2E957U2EJO2YF2XN0mmzTmDwMz6uGLte4A5YRy31HTywWbVVuE0lKE EwI1nar59BV33DujQ5IBRXyAKevBzz1tJjDCJkccfB9Gf6hee1HLkBnuMvYU4R1G 2VTiVXjF3CnCRZ2iRYdnsCB81uracHI2FXGvBz5bY0ahNpiFRgDkkSPqb9ISNC9k ngpUb8MGoxfuNHQftEG8iUGoB7gGMFllmNZWLWCzoDXVNloZppLxb9nk46m7y7L2 0Cg= -----END CERTIFICATE-----Generated at Wed Dec 31 01:58:43 2025 by rpki-client